# Help needed for PC malware extension

**URL:** <https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950>\
**Category:** In My Humble Opinion\
**Created:** [July 17, 2025, 1:25am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950 "2025-07-17T01:25:10Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Newtosite](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/newtosite/32/8623_2.png) [@Newtosite](https://boards.straightdope.com/u/Newtosite)\
**Post date:** [July 17, 2025, 1:25am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/1 "2025-07-17T01:25:10Z")

</div>

A malicious extension called NebulaTachyonen appeared in Microsoft Edge on  
my ThinkPad. It says it’s been added by my “organization” though I don’t belong to any. There’s no option to remove it manually. I’ve read everything I can find about it and followed the instructions I could understand.

Lenovo premium support says I’ll need to reinstall Windows. The two tech businesses I called said that’s not necessary. One would use Malwarebytes but I already did that scan, and it didn’t detect it.

Are there any malware removal products that are more thorough than Malwarebytes?

Thanks for any suggestions!

---

<div class="post-metadata">

**Author:** ![PastTense](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pasttense/32/14550_2.png) [@PastTense](https://boards.straightdope.com/u/PastTense)\
**Post date:** [July 17, 2025, 2:11am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/2 "2025-07-17T02:11:55Z")

</div>

This site recommends Spyhunter which has a 7 day free trial:

[https://howtoremove.guide/remove-nebulatachyonen/](https://howtoremove.guide/remove-nebulatachyonen/)

---

<div class="post-metadata">

**Author:** ![Petek](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/petek/32/1590_2.png) [@Petek](https://boards.straightdope.com/u/Petek)\
**Post date:** [July 17, 2025, 2:13am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/3 "2025-07-17T02:13:09Z")

</div>

Edge policies may have been reset by the malware so that Edge is “managed by your organization.” If so, that might be what’s preventing you from removing the malware. [This article](https://learn.microsoft.com/en-us/answers/questions/2399128/my-browser-is-being-managed-by-a-organization) has some suggestions how disable the policy. If that doesn’t help, run a search for _Edge is being managed by my organization_. Hope this suggestion is useful.

---

<div class="post-metadata">

**Author:** ![md-2000](https://avatars.discourse-cdn.com/v4/letter/m/9d8465/32.png) [@md-2000](https://boards.straightdope.com/u/md-2000)\
**Post date:** [July 17, 2025, 2:59am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/4 "2025-07-17T02:59:50Z")

</div>

I see this:

> **[I've been Browser Hijacked and I can't seem to get rid of it. It's an edge...](https://learn.microsoft.com/en-au/answers/questions/4375767/ive-been-browser-hijacked-and-i-cant-seem-to-get-r)**
>
> So every time i search anything on Microsoft edge it comes up to a tab "customsearch.quickshoppers.co" which isn't helpful at all. In my extensions menu theres an extension called NebulaTachyonen. I cannot delete this extension or even change…

Another thing I learned once is simplicity in confusion. I had some sort of add-on that redirected my searches. It turns out when I looked at the browser properties, it said it was named Google seach. But - when I went to settings - Search engine - manage search engines - and edited Google, the website in details was not google. Neither were any of the other search engines (Microsoft etc.) they all were actually the website of the redirected PUP (Potentially Unwanted Program)

The link in previous post seems more detailed:  
[https://howtoremove.guide/remove-nebulatachyonen/](https://howtoremove.guide/remove-nebulatachyonen/)

---

<div class="post-metadata">

**Author:** ![Newtosite](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/newtosite/32/8623_2.png) [@Newtosite](https://boards.straightdope.com/u/Newtosite)\
**Post date:** [July 17, 2025, 3:15am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/5 "2025-07-17T03:15:44Z")

</div>

Thank you everyone for your amazing responses!  
I’ll let you know my results.

---

<div class="post-metadata">

**Author:** ![Newtosite](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/newtosite/32/8623_2.png) [@Newtosite](https://boards.straightdope.com/u/Newtosite)\
**Post date:** [July 17, 2025, 8:17am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/6 "2025-07-17T08:17:44Z")

</div>

Well, I didn’t get very far. ☹

I can’t run a search for “Edge is being managed by my organization.” because I get redirected to a site called custom search.quick shoppe [rs.co](http://rs.co) whenever I try to use google or bing. I downloaded Spyware, but I guess I’ll have to pay to subscribe in order to get the free trial. Has anyone here ever used it?

Honestly, the article’s instructions were too complicated for me to follow. ☹

Thank you for trying. I’m just not tech savvy enough to benefit from your help.

---

<div class="post-metadata">

**Author:** ![What\_Exit](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/what_exit/32/10652_2.png) [@What\_Exit](https://boards.straightdope.com/u/What_Exit)\
**Post date:** [July 17, 2025, 11:35am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/8 "2025-07-17T11:35:41Z")

</div>

> [@Newtosite](#):
>
> search.quick shoppe [rs.co](http://rs.co)

**Moderating:**

As this site is a a **browser hijacker** site, I’m requesting you post no further links in this thread and stick to asking questions without links.

I also moved from #Factual Questions for threads with a purely factual answer to #In My Humble Opinion for asking opinions.

---

<div class="post-metadata">

**Author:** ![gnoitall](https://avatars.discourse-cdn.com/v4/letter/g/bb73d2/32.png) [@gnoitall](https://boards.straightdope.com/u/gnoitall)\
**Post date:** [July 17, 2025, 11:44am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/10 "2025-07-17T11:44:04Z")

</div>

> [@Newtosite](#):
>
> I guess I’ll have to pay to subscribe

For the love of all that’s holy, don’t give the criminals money. You’d literally be better off taking the computer out back and burning it to ashes than paying extortion, especially since you’re likely to actually get nothing in return.

---

<div class="post-metadata">

**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\
**Post date:** [July 17, 2025, 12:11pm UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/11 "2025-07-17T12:11:58Z")

</div>

Can you download Firefox or Chrome so that you can do real searches, not what this malware is directing you to?

---

<div class="post-metadata">

**Author:** ![PastTense](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pasttense/32/14550_2.png) [@PastTense](https://boards.straightdope.com/u/PastTense)\
**Post date:** [July 17, 2025, 1:35pm UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/12 "2025-07-17T13:35:09Z")

</div>

I posted about Spyhunter. Wikipedia says there are questions about that tool:

> **[SpyHunter (security software)](https://en.wikipedia.org/wiki/SpyHunter_(security_software))**
>
> Free edition: Shareware; personal use only
> SpyHunter is an anti-spyware computer program for the Microsoft Windows (Windows XP and later) operating system. It is designed to remove malware, such as trojan horses, computer worms, rootkits, and other malicious software.
> SpyHunter is currently at version 5, and receives daily definition updates. SpyHunter has a free version, which allows the user to scan their computer. Purchase is required to remove found malware. EnigmaSoftware also offers a ser...

> SpyHunter is often labeled an [Potentially Unwanted Program](https://en.wikipedia.org/wiki/Potentially_Unwanted_Program) due to its misleading results of always showing infections, including on clean computers, and injects tracking cookies into a users [browser](https://en.wikipedia.org/wiki/Web_browser), raising concern whether it is legitimate or not. **The company also floods web search results when searching for a specific threat, linking a download to SpyHunter, even if the product is not able to remove it.**

I agree you should download another browser like Firefox, Brave or Chrome if possible.

---

<div class="post-metadata">

**Author:** ![markn\_1](https://avatars.discourse-cdn.com/v4/letter/m/f9ae1b/32.png) [@markn\_1](https://boards.straightdope.com/u/markn_1)\
**Post date:** [July 17, 2025, 6:28pm UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/13 "2025-07-17T18:28:02Z")

</div>

I’ve had good experiences with [Bitdefender](https://www.bitdefender.com/en-us/consumer/free-antivirus). I’ve only used it once to handle a browser hijack, but it worked. No guarantees that it will handle your particular situation of course, but it’s free, so giving it a try costs nothing but your time.

---

<div class="post-metadata">

**Author:** ![Newtosite](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/newtosite/32/8623_2.png) [@Newtosite](https://boards.straightdope.com/u/Newtosite)\
**Post date:** [July 17, 2025, 8:31pm UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/14 "2025-07-17T20:31:08Z")

</div>

I already have Chrome, and it redirects me to the same custom search site.  
But I just tried AVG – and it worked okay!

---

<div class="post-metadata">

**Author:** ![Newtosite](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/newtosite/32/8623_2.png) [@Newtosite](https://boards.straightdope.com/u/Newtosite)\
**Post date:** [July 17, 2025, 8:31pm UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/15 "2025-07-17T20:31:55Z")

</div>

Wow. Thanks for looking that up.

---

<div class="post-metadata">

**Author:** ![Newtosite](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/newtosite/32/8623_2.png) [@Newtosite](https://boards.straightdope.com/u/Newtosite)\
**Post date:** [July 17, 2025, 8:32pm UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/16 "2025-07-17T20:32:19Z")

</div>

Thanks, markn\_1. I’ll try it.

---

<div class="post-metadata">

**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\
**Post date:** [July 18, 2025, 11:05am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/17 "2025-07-18T11:05:40Z")

</div>

Chrome and Edge are essentially the same browser with different skins, but Firefox is different from the ground up, so you might have more luck there. Just be careful when installing it – it will ask if you want to import settings, bookmarks, etc., from your existing browser. Obviously, say no to that.

---

<div class="post-metadata">

**Author:** ![Mean\_Mr.Mustard](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mean_mr.mustard/32/3865_2.png) [@Mean\_Mr.Mustard](https://boards.straightdope.com/u/Mean_Mr.Mustard)\
**Post date:** [July 18, 2025, 11:26am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/18 "2025-07-18T11:26:14Z")

</div>

> [@markn\_1](#):
>
> I’ve had good experiences with [Bitdefender](https://www.bitdefender.com/en-us/consumer/free-antivirus).

FWIW, [PCMag Dot Com](https://www.pcmag.com/picks/the-best-antivirus-protection) ranks BitDefender as Best Overall antivirus software for 2025.

mmm

---

<div class="post-metadata">

**Author:** ![Newtosite](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/newtosite/32/8623_2.png) [@Newtosite](https://boards.straightdope.com/u/Newtosite)\
**Post date:** [July 19, 2025, 12:11am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/19 "2025-07-19T00:11:15Z")

</div>

Thanks, RitterSport.

---

<div class="post-metadata">

**Author:** ![Newtosite](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/newtosite/32/8623_2.png) [@Newtosite](https://boards.straightdope.com/u/Newtosite)\
**Post date:** [July 19, 2025, 12:13am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/20 "2025-07-19T00:13:21Z")

</div>

Good to know! I’ll try it this weekend. Fortunately, I can still use my computer for Word and graphics.

---

<div class="post-metadata">

**Author:** ![Dewey\_Finn](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dewey_finn/32/4222_2.png) [@Dewey\_Finn](https://boards.straightdope.com/u/Dewey_Finn)\
**Post date:** [July 19, 2025, 12:55am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/21 "2025-07-19T00:55:48Z")

</div>

I had malware in my Chrome installation and after trying various things, was able to get rid of it by uninstalling and reinstalling Chrome.

---

<div class="post-metadata">

**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\
**Post date:** [July 19, 2025, 10:39am UTC](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950/22 "2025-07-19T10:39:16Z")

</div>

I’m not sure if you uninstall Edge on a Windows computer. If you can, make sure you have Firefox in place first – what would happen if you had no browser at all, I wonder?

[Next page](https://boards.straightdope.com/t/help-needed-for-pc-malware-extension/1020950.md?page=2)
